Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8D56vSBxKerK3E89HNjiHmluO3c.roa
File: 8D56vSBxKerK3E89HNjiHmluO3c.roa (raw, json)
Hash identifier: v6m89Vt0DTl0el47NkBoGrYjYFfS05uPfb9AnENz0gI=
Subject key identifier: F0:3E:7A:BD:20:71:29:EA:CA:DC:4F:3D:1C:D8:E2:1E:69:6E:3B:77
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E35
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8D56vSBxKerK3E89HNjiHmluO3c.roa
Signing time: Wed 29 Sep 2021 02:43:18 +0000
ROA not before: Wed 29 Sep 2021 02:43:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 106.105.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F03E7ABD207129EACADC4F3D1CD8E21E696E3B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:5d:a4:2a:64:63:de:d5:49:1b:ce:a4:61:
a3:d0:dd:67:11:1f:ab:aa:67:5c:f9:f8:ff:b2:1a:
92:f9:47:91:72:b4:cc:8c:28:6e:c8:92:8a:51:b3:
55:3a:1b:3e:28:42:37:1b:d3:27:fa:5b:20:ad:c9:
81:02:a9:39:87:24:f4:2f:76:ab:52:2d:69:6c:a6:
0c:a4:68:7a:78:1b:71:46:a6:0a:5b:4d:99:74:c1:
e9:bb:40:35:cf:32:b1:e6:1d:47:07:09:2c:b7:ab:
80:16:bf:5c:22:0e:ee:78:7a:aa:55:f3:30:92:54:
3f:84:70:5e:8a:d3:b1:26:f0:11:d4:e6:6a:82:0e:
69:2a:89:78:b0:7c:8c:eb:3e:58:4a:2e:71:af:27:
08:ad:80:d9:2e:ef:77:43:ff:6d:7e:cd:de:b2:3e:
ca:2a:a5:cd:37:2d:a6:93:cf:44:ec:40:08:58:39:
51:22:e2:dd:71:52:62:a3:86:9f:04:51:92:a6:52:
c4:4c:22:8f:f8:0b:3b:7d:b1:dc:a1:bf:89:28:6e:
12:97:44:67:2e:7b:84:80:a7:5b:70:ef:4c:3c:e3:
0c:14:ea:4b:9c:65:ba:1b:66:d9:e4:49:53:4a:2e:
57:f9:3c:ba:71:f2:5c:7c:9f:bf:83:04:34:d4:24:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:7A:BD:20:71:29:EA:CA:DC:4F:3D:1C:D8:E2:1E:69:6E:3B:77
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8D56vSBxKerK3E89HNjiHmluO3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/21
Signature Algorithm: sha256WithRSAEncryption
15:9c:75:09:2a:e3:9b:fc:1b:13:0e:a8:3f:11:c5:5f:4a:45:
fc:92:b0:e9:71:43:27:9f:86:e2:04:3c:ce:64:91:65:4c:a9:
7d:f6:41:4a:0b:39:cb:3f:c3:81:40:78:f3:94:13:17:2a:bc:
45:1e:34:7b:ef:09:20:27:87:63:45:80:21:c6:ba:e5:bd:1a:
56:55:29:f8:11:e5:56:79:90:4e:97:1b:4c:f4:1d:54:6e:e7:
14:41:e3:96:2c:d3:62:2c:7e:74:9a:c5:0d:41:68:85:27:37:
7c:5f:37:a1:ea:99:96:b2:ab:96:ee:ea:a1:24:78:f2:f3:8f:
c7:28:c7:fb:ad:b3:54:c2:4d:4e:16:4a:44:84:1a:1e:da:15:
81:78:47:10:66:21:30:10:a6:86:7b:4f:ed:77:6e:35:ac:4f:
5a:ba:e4:3b:ba:8f:76:d0:6d:28:34:7b:de:ac:c6:e8:17:d5:
fd:99:9e:8a:9a:1b:98:ed:f3:12:9a:77:17:d1:f0:b2:f7:1c:
74:21:69:e9:29:1f:2b:8e:19:ab:36:f3:84:78:fe:d7:a2:9f:
be:63:b7:6d:23:a5:3e:e2:74:7d:be:d9:de:e7:68:90:6a:62:
f5:f6:a6:cc:22:d1:b6:13:d0:b5:03:60:ea:e6:a3:3d:33:ab:
fc:5a:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:30 2025 by rpki-client